Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

apache2: memory leak

Package(s):

apache2

CVE #(s):

CVE-2005-2970

Created:

December 6, 2005

Updated:

December 19, 2005

Description:

A memory leak was found in the Apache 2 'worker' module in the handling of aborted TCP connections. By repeatedly triggering this situation, a remote attacker could drain all available memory, which eventually led to a Denial of Service.

Alerts:

Mandriva	MDKSA-2005:233	2005-12-19
Ubuntu	USN-225-1	2005-12-06

(Log in to post comments)